Static task
static1
Behavioral task
behavioral1
Sample
4065c510bee35c6bdb26d11fd15b1d9f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4065c510bee35c6bdb26d11fd15b1d9f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4065c510bee35c6bdb26d11fd15b1d9f_JaffaCakes118
-
Size
185KB
-
MD5
4065c510bee35c6bdb26d11fd15b1d9f
-
SHA1
7b7ad814c9b8a18ff05f2a0a445559351d4b028a
-
SHA256
eea6b776d42c359147cf630f7884c65661c84f74613fbd6261bdb09a8865c7bb
-
SHA512
57f054a7c6e8539d46d5f1f18118bf8d999a72d0483e044b941e40494ea3fab88d9a697c62487c42726c2e966fadd9e98079b189bb7d5ecb7cb2e0e92dc226b5
-
SSDEEP
3072:yHF5G9jXtyjaT8cws8WaGyJboazeyD0iBQRao+QDCu144kQMlFROs9NAq:eFA1SaT8ctabMQQRa2r1Mjok
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4065c510bee35c6bdb26d11fd15b1d9f_JaffaCakes118
Files
-
4065c510bee35c6bdb26d11fd15b1d9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
62bac7d5268dba929e84001c4cc4c0d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
PostThreadMessageA
gdi32
GetStockObject
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueA
shell32
SHGetPathFromIDListA
comctl32
ord17
shlwapi
PathStripToRootA
oledlg
ord8
ole32
OleInitialize
oleaut32
SysAllocStringLen
Sections
.text Size: 170KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE